What are the responsibilities and job description for the Cyber Security Consultant position at Avenue Code?
Avenue Code is the leading software consultancy focused on delivering end-to-end development solutions for digital transformation across every vertical. We’re privately held, profitable, and have been on a solid growth trajectory since day one. We care deeply about our clients, our partners, and our people. We prefer the word ‘partner’ over ‘vendor’, and our investment in professional relationships is a reflection of that philosophy. We pride ourselves on our technical acumen, our collaborative problem-solving ability, and the warm professionalism of our teams.
Avenue Code has been believing in and promoting plurality actions for over 10 years, understanding that recognizing differences and fostering a safe environment, employment opportunities, representation, and support are the best ways to promote an increasingly equitable culture.
About the opportunity:
The role will be hybrid Senior IAM MAP Control Tester
Location: Local candidates only | Hybrid role
Role Overview The Senior IAM MAP Control Tester is responsible for executing Identity and Access Management (IAM) compliance testing in support of the IAM MAP. The role focuses on IT General Controls (ITGCs) and alignment to relevant NIST framework principles and requires strong technical audit expertise and close partnership with IT teams throughout project cycles.
Top Qualifications • Hands on experience supporting IAM control testing, including planning, walkthroughs, testing execution, and results reporting. • Proven success collaborating with external auditors and internal stakeholders during testing cycles. • Strong data analysis skills, including advanced Excel (pivot tables, VLOOKUP/XLOOKUP, complex formulas).
Key Responsibilities • Support the IAM MAP Lead in executing IAM compliance testing activities. • Drive planning and execution of IT compliance testing, including walkthroughs and detailed control testing. • Conduct complex control walkthroughs with system owners, validate control design, and document clear, audit ready narratives. • Review test plans, evidence, and workpapers to ensure alignment with Internal Audit standards. • Identify IT control deficiencies, provide remediation guidance, and track corrective actions to closure. • Coordinate with system owners and stakeholders to ensure timely and complete evidence collection. • Develop data analysis and reporting outputs using advanced Excel techniques to support testing conclusions. • Partner with IT and Security teams to resolve control gaps and support audit readiness.
Required Qualifications • Bachelor’s degree in Information Systems or a related field.
• 5 years of IT Audit or IT Compliance experience, including ITGC and NIST aligned testing. • Strong understanding of IT compliance requirements, control concepts, and audit methodology. • Advanced Excel proficiency (pivot tables, lookup functions, complex formulas). • Excellent analytical, documentation, and communication skills. • Ability to manage multiple priorities and lead workstreams under tight deadlines.
Preferred Qualifications • Professional certifications such as CISA, CRISC, or CISSP. • Experience with ERP systems (e.g., SAP, Oracle). • Familiarity with control frameworks such as NIST and COBIT. • Experience using audit and GRC tools.
Soft Skills • Strategic and analytical thinker with strong problem-solving skills. • Confident communicator with the ability to engage technical and non-technical stakeholders. • Adaptable and comfortable working in fast paced, evolving compliance environments.
Logistics / Equipment • Client laptop will be provided. In the event of delays, the candidate must be able to temporarily use a supplier provided device. • Required equipment: Docking station (personal or supplier provided).:
Avenue Code reinforces its commitment to privacy and to all the principles guaranteed by the most accurate global data protection laws, such as GDPR, LGPD, CCPA and CPRA. The Candidate data shared with Avenue Code will be kept confidential and will not be transmitted to disinterested third parties, nor will it be used for purposes other than the application for open positions. As a Consultancy company, Avenue Code may share your information with its clients and other Companies from the CompassUol Group to which Avenue Code’s consultants are allocated to perform its services.